I rarely use SMTP, mostly I just use the API keys. Last month the SMTP password was Brute Force and stolen, the attacker send over 100k emails from my domain which I had to pay for. I would like some ways to help prevent that in the future.